General

  • Target

    mips.elf

  • Size

    33KB

  • Sample

    241023-nkffyayhqk

  • MD5

    43fcb136ad790e1d370b2ddc253c99f9

  • SHA1

    f64fbeb5e6971954041e03f81f1fb2b4ace6625d

  • SHA256

    7e4261bcd8e9e8eea9300807bf9c6677218742798578c1f1072e8b974a341fc2

  • SHA512

    e66e658dfa84b5eace2bdc5c70f1f1f4c6f04f99a3f9cb35fba45f7dc14300da6a397e363f5110ec7108701147c2bc7a5518a6badf312d26c60ca9a14f553449

  • SSDEEP

    768:W7n9N4kPEswNdQXeGnTdGQyFwqMxTovJgGlzDpbuR1JX:W7n9vPEB/QOGTgwDxTeVJu1

Malware Config

Extracted

Family

mirai

Botnet

UNSTABLE

C2

jinhj.stressamp.com

rgvsf.stressamp.com

Targets

    • Target

      mips.elf

    • Size

      33KB

    • MD5

      43fcb136ad790e1d370b2ddc253c99f9

    • SHA1

      f64fbeb5e6971954041e03f81f1fb2b4ace6625d

    • SHA256

      7e4261bcd8e9e8eea9300807bf9c6677218742798578c1f1072e8b974a341fc2

    • SHA512

      e66e658dfa84b5eace2bdc5c70f1f1f4c6f04f99a3f9cb35fba45f7dc14300da6a397e363f5110ec7108701147c2bc7a5518a6badf312d26c60ca9a14f553449

    • SSDEEP

      768:W7n9N4kPEswNdQXeGnTdGQyFwqMxTovJgGlzDpbuR1JX:W7n9vPEB/QOGTgwDxTeVJu1

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks